Online Threat Alerts (OTA) - Alerting you to scams and frauds.
USPS Scam Text PDF Attachment - How to Protect Yourself

The USPS text scam featuring a PDF attachment is a dangerous variation of a package tracking "smishing" (SMS phishing) scheme. Cybercriminals use the United States Postal Service name to trick victims into revealing financial data.

How the Scam Works

  1. The Urgent Text: You receive a text message from a standard 10-digit number claiming a package cannot be delivered due to an incomplete address or unpaid fee.
  2. The PDF Attachment: Instead of a raw web link, the text instructs you to open an attached PDF file (often labeled as an "Urgent Notice"). Scammers use compressed stream objects and custom font formatting inside the document to hide malicious links from automated phone security filters.
  3. The Fake Website: Clicking the hidden link or button inside the PDF opens a high-quality, cloned look-alike of the official USPS website.
  4. The Data Theft: The fake page prompts you to type in your address, phone number, and credit or debit card details to pay a tiny redelivery fee (usually under $1.00). Once entered, scammers steal your financial information instantly.

Clear Red Flags to Look For

  • Unsolicited Delivery Updates: The USPS never sends text alerts unless you explicitly requested tracking updates for a specific package first.
  • Document Files Attached to Texts: Official postal services will never send unexpected PDF or image attachments via text message.
  • Standard Phone Numbers: Legitimate USPS text notifications only originate from a 5-digit short code (28777), never from a standard 10-digit mobile number.
  • Requests for Money: The real postal service does not demand online credit card payments for normal package redeliveries.

What to Do Immediately

  • Do Not Open the File: Avoid clicking the text or downloading the PDF. Opening it can expose your device to hidden tracking parameters or malware.
  • Report the Message: Copy the body text of the message and forward it to 7726 (SPAM) to alert your mobile carrier.
  • Delete and Block: Delete the text conversation entirely and block the sender's phone number on your device.
  • Verify Packages Directly: If you are actually expecting a package, bypass the text entirely. Open your web browser, navigate manually to the official USPS Tracking Tool, and type in your tracking number safely.

If you already entered your credit card info into the link from this text, call your bank or credit card company immediately to freeze your card and report the fraudulent transaction.

waiting